http://217.154.3.16/ Recent content on snowpatch Hugo -- gohugo.io en-us Fri, 14 Mar 2025 00:00:00 +0000 http://217.154.3.16/posts/i-can-completely-control-your-smart-thermostat/ Fri, 14 Mar 2025 00:00:00 +0000 http://217.154.3.16/posts/i-can-completely-control-your-smart-thermostat/ tl;dr Until this past week, an attacker could have easily and surreptitiously discovered, monitored, and controlled all of the Mysa smart thermostats in the world. Mysa thermostat owners use the Android or iPhone apps to control their thermostats. Even if the owner is at home and connected to the same WiFi network as the thermostats, the communication between the app and the thermostat always passes through a single set of US-based servers in the AWS cloud. http://217.154.3.16/posts/your-ssh-user-key-probably-reveals-your-real-world-identity/ Tue, 11 Mar 2025 00:00:00 +0000 http://217.154.3.16/posts/your-ssh-user-key-probably-reveals-your-real-world-identity/ Right before leaving my previous job, we released a lengthy post that I had written about a survey of around 20 million public keys, which I had gathered from all different corners of the Internet during summer 2024. This includes TLS certificates, SSH server keys, Github and Gitlab user keys, and DNSKEYs. A friend recently pointed me to some similar things out there, which I hadn’t been aware of when I originally worked on this. http://217.154.3.16/about/ Mon, 01 Jan 0001 00:00:00 +0000 http://217.154.3.16/about/ I like running, democracy, learning to speak new languages and cultures, and humans being in control of technology rather than the other way around. A curated list of open-source software that I’ve created and contributed to I was a Top Writer on Quora before it devolved into a pile of monetized clickbait and AI slop. LinkedIn, StackOverflow